CVE-2026-75000CWE-669

CVE-2026-75000

Medium · published August 17, 2026

CVSS v3.1
5.8
EPSS
0%
Percentile
39.8
In the wild
Unconfirmed
What it is

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper HTML/CSS sanitization of the SVG animate "by" attribute may lead to remote image blocking bypass, which in turn may lead to information disclosure or privilege escalation.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00471 · 39.8th percentile
Weakness
CWE-669 · Incorrect Resource Transfer Between Spheres
Published
2026-08-17T17:16Z
Affected products (2)
ProductVersionsFixed in
roundcube/webmail≥ 1.6.0, < 1.6.181.6.18
roundcube/webmail≥ 1.7.0, < 1.7.31.7.3
References (3)
https://github.com/roundcube/roundcubemail/releases/tag/1.6.18 · [email protected]https://github.com/roundcube/roundcubemail/releases/tag/1.7.3 · [email protected]https://roundcube.net/news/2026/08/09/security-updates-1.6.18-and-1.7.3 · [email protected]
EPSS history
Timeline
  • 17 AUG 12:45Z
    In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper HTML/CSS sanitization of the SVG animate "by" attribute may lead to remote image blocking…
    cvelistv5